summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/soc/intel/common/block/cpu/Kconfig10
1 files changed, 10 insertions, 0 deletions
diff --git a/src/soc/intel/common/block/cpu/Kconfig b/src/soc/intel/common/block/cpu/Kconfig
index 1351cb8e1d..995a95680c 100644
--- a/src/soc/intel/common/block/cpu/Kconfig
+++ b/src/soc/intel/common/block/cpu/Kconfig
@@ -88,3 +88,13 @@ config USE_INTEL_FSP_TO_CALL_COREBOOT_PUBLISH_MP_PPI
help
This option allows FSP to make use of MP services PPI published by
coreboot to perform multiprocessor initialization.
+
+config INTEL_TME
+ bool "Total Memory Encryption (TME)/Multi-key TME (MKTME)"
+ default n
+ help
+ Enable Total Memory Encryption (TME)/Multi-key TME (MKTME). The spec is
+ available at "https://software.intel.com/sites/default/files/managed/a5
+ /16/Multi-Key-Total-Memory-Encryption-Spec.pdf". If CPU supports TME,
+ it would get enabled. If CPU supports MKTME, this same config option
+ enables MKTME.